63bfea29ef26e706792855f87df6135e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63bfea29ef26e706792855f87df6135e
Size

12KB
MD5

63bfea29ef26e706792855f87df6135e
SHA1

eb0a45db3e368b659b389e3595ec5e9b9d819234
SHA256

d6052697cd3714e2f690242452a21df044d6754d2394c154e2ccc767f164087c
SHA512

0bf1013343080d3c713424aa2583f8147e05ea571b4cbd3049aa2abef9c7555ba3bb0ccf20f5d4b70e3c84d8f5b322bc68147db0f46ef6429838020b3ee8254c
SSDEEP

192:tVnzKqG+UQQ8Zj5WyMSwKF340420lNm/RD0UTd:t5zK6N2KxH07WRL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63bfea29ef26e706792855f87df6135e

Files

63bfea29ef26e706792855f87df6135e
.dll regsvr32 windows:4 windows x86 arch:x86

137166ac0d20390ea469ebf32a3fbfa6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
lstrlenW
GetVersionExA
lstrcatW
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
FreeLibrary
SetCurrentDirectoryA
GetSystemDirectoryW
HeapAlloc
GetProcessHeap
HeapFree
RtlUnwind
lstrcmpA
CompareStringW
SetFileAttributesA

user32

CloseWindow
IsIconic
CharLowerA
wsprintfW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA

oleaut32

SysAllocString
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ